Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier: UXpwLWctdpIfz3a/wikYGd7hUaqXJUuyJNu+rST7LZw=
Subject key identifier: 97:E5:10:FA:C8:3A:1D:0C:61:25:63:91:22:0E:9A:77:CD:1F:9D:A0
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial: 0194BD8585430F8C5894550F567D229974E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: pEtHBnNIEgIB0GXcMW/Ov1qBFOF8W82Nk/69ZQ9Rk8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:43:0f:8c:58:94:55:0f:56:7d:22:99:74:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=97e510fac83a1d0c61256391220e9a77cd1f9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:af:db:51:27:1f:99:cc:0e:12:62:c8:fb:
0f:57:11:ad:59:74:51:49:09:a3:18:78:8b:ba:41:
29:cb:6c:ca:87:42:84:9d:4e:32:6a:f2:15:c5:13:
53:8b:72:30:74:c7:2f:0b:d5:4a:68:db:41:79:fb:
31:c6:76:9f:81:e0:fe:c1:17:ac:97:79:90:50:83:
8e:8d:4c:f0:a6:41:66:58:92:1b:db:01:74:e2:0c:
71:9f:84:00:cd:09:fe:96:ba:69:8c:0e:5a:8d:a4:
83:37:0c:94:70:6b:ce:ee:a5:2d:4a:90:03:44:a2:
5a:0e:5e:52:40:24:50:3f:67:f8:17:f5:cd:3e:c5:
d8:ec:61:5b:50:48:62:5f:61:3e:bb:5e:91:53:93:
b3:bd:25:2f:68:7f:d1:3f:79:b9:9f:04:c6:4e:2c:
a5:a7:ca:16:d2:44:49:bd:e0:79:b7:22:2f:84:bc:
09:55:42:0c:bd:4e:c6:13:36:34:f7:2a:06:f7:25:
2d:07:25:97:9b:4f:45:2d:26:4d:06:a0:21:aa:0c:
9e:73:2d:76:b3:fc:03:cb:64:d5:7b:d8:51:9e:cf:
7d:dd:98:81:41:27:ed:4f:a5:d3:09:32:ce:9f:c9:
1e:af:f8:99:e1:09:f6:76:67:08:73:e5:61:79:04:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:10:FA:C8:3A:1D:0C:61:25:63:91:22:0E:9A:77:CD:1F:9D:A0
X509v3 Authority Key Identifier:
keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:11:fd:8b:a4:bf:07:64:df:c3:2b:42:84:e0:7a:76:c0:
4e:05:f3:e9:cc:93:72:00:88:26:49:33:0d:a7:af:86:f0:3b:
d2:eb:25:e5:aa:b6:8d:96:a4:29:e6:1e:3e:66:3e:ef:31:62:
b1:2f:6b:22:a4:5b:05:bd:b9:14:19:0b:b5:ea:e4:d3:7a:f1:
f7:7f:76:f3:87:33:53:c7:42:62:ce:ca:66:5d:62:56:a5:ca:
07:89:66:f4:f2:71:f6:1a:9c:75:d9:ea:69:77:61:5b:0b:c9:
ae:c6:07:b6:ba:10:f0:84:05:55:79:67:a5:58:40:4a:b7:2c:
fe:ab:bf:ae:27:9a:db:21:f9:55:c7:4e:6a:5b:8a:f6:4b:06:
75:99:5d:02:1a:41:67:74:9e:40:4e:68:0c:cc:64:b5:99:5f:
70:39:a7:9d:7a:1f:2b:1b:ae:ba:2e:29:f9:9e:1d:0a:b6:ae:
23:25:36:e9:9b:08:25:34:3d:40:43:03:87:90:f8:da:ec:07:
ca:9a:2a:e2:cf:26:ef:5d:ac:90:ba:eb:2b:e2:c4:72:ed:4a:
50:e0:f6:7e:b7:ab:2b:34:40:86:6f:dc:9b:0c:a9:a4:07:75:
2a:02:3c:e5:e9:b0:7f:23:54:62:92:25:58:5a:48:20:36:a0:
f8:7d:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:23 2025 by rpki-client